40112c6e045be5dd32f9d1fcf1279b5d_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

40112c6e045be5dd32f9d1fcf1279b5d_JaffaCakes118
Size

105KB
MD5

40112c6e045be5dd32f9d1fcf1279b5d
SHA1

ff9fc6c4d03d150468c7674cef797e1d4198e2b0
SHA256

e36e87e874110f882bb2ef93170ed822b3ae84dc508f5d01ade1d757c41907db
SHA512

ee1d341310371bdda57b3c3627ccbaa006e24b11c984e7e55a69966baaa8759ca94fbc0626ac52ca0b29c040966dd5790a1436e2d22aafd2100f00cf8ff0379c
SSDEEP

1536:eoiQt0BpecUOwwClMY1C75vaU2aN2en4kJHrXeEaMRfJa1Q+vpVCqX+hi:ebzecUOxC2Y1C7Zzfn4cHSETRffApyh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40112c6e045be5dd32f9d1fcf1279b5d_JaffaCakes118

Files

40112c6e045be5dd32f9d1fcf1279b5d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

628f9c862417a5f78e02ee17cf48bbb4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

OutputDebugStringA
GlobalUnlock
GlobalLock
GlobalAlloc
MultiByteToWideChar
lstrlenA
FileTimeToSystemTime
GetTimeFormatW
GetDateFormatW
WriteFile
GlobalFree
ReadFile
CompareStringW
MulDiv
GetLocaleInfoW
GetNumberFormatW
FreeLibrary
FormatMessageW
lstrcmpiW
CloseHandle
GetLocalTime
SetLastError
HeapFree
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
lstrlenW
LocalFree
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlUnwind
InterlockedCompareExchange
Sleep
InterlockedExchange
LocalAlloc
HeapAlloc
InterlockedIncrement
InitializeCriticalSection
DisableThreadLibraryCalls
GetSystemTime
GetVersion
GetFileAttributesW
GetProcAddress
LoadLibraryW
GetModuleHandleA
CreateEventW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedDecrement
WideCharToMultiByte
GetLastError
VirtualProtect
GetCommandLineA
VirtualFree
SystemTimeToFileTime
VirtualAlloc

user32

RemovePropW
RegisterClassW
GetDC
ShowWindow
SetFocus
SetRect
InvalidateRect
GetSysColor
GetWindowRect
GetClientRect
CreateWindowExW
PostMessageW
SendMessageW
GetDlgItem
ReleaseDC
FillRect
CreatePopupMenu
InsertMenuItemW
UnionRect
IsDlgButtonChecked
DrawEdge
wsprintfW
CheckRadioButton
SetPropW
LoadCursorW
EnableWindow
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
DestroyMenu
IsWindowEnabled
GetSystemMetrics
GetFocus
DrawFocusRect
LoadStringW
MoveWindow
CopyRect
MessageBoxW

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW

gdi32

CreateSolidBrush
LineTo
MoveToEx
ExtTextOutW
DeleteObject
SetTextColor
SetBkColor
GetStockObject
GetTextExtentPoint32W
SetTextAlign
SelectObject
TextOutW

ole32

StringFromGUID2

msvcr71

_except_handler3
_vsnwprintf
memcpy
strstr
wcsstr
wcstok
_wtoi
towlower
free
_onexit
malloc
realloc
_initterm
_XcptFilter
_adjust_fdiv
__CppXcptFilter
__dllonexit
memset

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

628f9c862417a5f78e02ee17cf48bbb4

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

ole32

msvcr71

Sections

.text Size: 60KB - Virtual size: 59KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 35KB - Virtual size: 68KB

.sxdata Size: 512B - Virtual size: 8B

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 60KB - Virtual size: 59KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 35KB - Virtual size: 68KB

.sxdata
Size: 512B - Virtual size: 8B

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 2KB